# cpu-guard exemption allowlist — interactive agent/LSP runtimes that must never be
# capped into build.slice (they starve behind builds). Path-anchored ERE, one per line.
# Matched ONLY against absolute-path, space-free argv tokens (the resolved script/binary
# path), never the prompt text. DEFAULT-DENY: anything not matched here is capped.
# Exempting a ROOT agent entrypoint is enough — its full-path node/bun/python children
# inherit the parent's slice, so they never need their own entry.

# Root agent entrypoints (hit the node shim via `env node`). codex is launched via its
# npm-global bin SYMLINK path, so node's argv is `/usr/bin/node ~/.npm-global/bin/codex`
# (never the @openai/codex/...codex.js target); match BOTH forms. The tmpjail bwrap clears
# AGENT_BUILD_SCOPE_ACTIVE, so this path allowlist — not the env bypass — is what exempts codex.
/@openai/codex/
/\.npm-global/bin/codex
/usr/local/bin/codex
/\.local/share/cursor-agent/versions/
/\.local/share/claude/versions/

# Agent infra that CAN be launched via bare `node` (per-tool-call hooks, long-lived
# servers) — false-capping these regresses the very latency this fix targets.
/plugins/marketplaces/context-mode/
/\.codex/memory-bridge/
/code-review-graph

# Language servers — editor latency is the sharpest interactive signal.
/[^/ ]*tsserver[^/ ]*\.js
/[^/ ]*language-server